consider adding hashes to non-hosted files

Right now, your lockfile will not reflect that a file was updated if it is not hosted on Modrinth _**and**_ its filename does not change.

Consider saving the computed hash of the file in the lockfile instead of just saving `null` as the version and leaving it at that.

Thinking about a scenario where the developer does not have access to internet when they try to set up the file